Courseiva
Free · No account needed · No credit card

Security+ SY0-701 Practice Test

1,030 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 90 min
Pass mark: 750/1000

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Security Program Management and Oversighteasy
Full explanation →

An HR spreadsheet contains employee names, Social Security numbers, and bank account numbers. Which label is most appropriate under a Public, Internal, Confidential, and Restricted scheme?

APublic, because it is used by the HR department and not shared externally.
BInternal, because only employees should see it.
CConfidential, because the information should be kept private but not tightly controlled.
Restricted, because it contains highly sensitive personal and financial data.Correct

A spreadsheet containing employee names, Social Security numbers, and bank account numbers includes personally identifiable information (PII) and financial account data, which are subject to strict regulatory controls (e.g., GDPR, GLBA, or state breach notification laws). Under a…Read full explanation

Q2Security Program Management and Oversightmedium
Full explanation →

An engineering tool runs on an unsupported operating system, but the tool is used only occasionally and can be replaced by a supported cloud service with little workflow impact. Which risk treatment is best?

AAccept the risk because the tool is old and still functions
BTransfer the risk to the cloud provider without making changes
Avoid the risk by retiring the unsupported system and replacing it with the supported serviceCorrect
DCompensate for the risk by adding more user passwords

The best risk treatment for an unsupported operating system that is only used occasionally and can be replaced with minimal workflow impact is to avoid the risk entirely. By retiring the unsupported system and migrating to the supported cloud service, the organization eliminates …Read full explanation

Q3Security Program Management and Oversighteasy
Full explanation →

The help desk needs a document that tells analysts exactly how to verify a caller, reset a password, and record the ticket when a user is locked out. What type of document is this?

ProcedureCorrect
BPolicy
CStandard
DGuideline

A procedure is the correct type of document because it provides step-by-step instructions for performing a specific task, such as verifying a caller's identity, resetting a password, and recording a ticket. Unlike a policy, which states high-level rules, a procedure details the e…Read full explanation

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All SY0-701 questionsSY0-701 exam guideStudy guidePractice by domain